Creating a Custom Rule in Codeac to Ban Raw Types in Java
Learn how to forbid raw types in Java by writing a custom Codeac rule in YAML, running the analysis, and verifying the violation appears in the report.
Loading…
ReadMeFeed / Community knowledge
#static-analysis
Real questions. Useful conversations. Find the people who know your stack.
javaEnforcing Consistent Code Quality with Qodana: From Local IDE to CI/CD
Qodana lets you run JetBrains IDE inspections inside CI pipelines with Docker. Learn how to set up a baseline, export SARIF for PR annotations, and manage memory limits in a practical GitHub Actions example.
docker
qodanaUsing F# Units of Measure to Prevent Unit‑Mismatch Bugs
Learn how F#'s Units of Measure let the compiler catch accidental mixes of meters, feet, and other units before your code runs.
dotnet
fsharpEnforcing Build Failures with SonarQube Quality Gates
Learn how to configure SonarQube Quality Gates to automatically fail CI/CD builds when new code violates security or quality thresholds.
sonarqubeIntegrating Qodana into Your CI Pipeline: A Practical Guide to IntelliJ Inspections in Headless Mode
Learn how to run IntelliJ IDEA’s full inspection suite in CI/CD with Qodana, configure custom profiles, and generate SARIF reports for automated quality gates.
Choosing Between Qodana Docker and Local Install for CI – A Practical Decision Guide
Decide whether to run Qodana in Docker or install it locally. Compare isolation, speed, and version control, then see a GitHub Actions workflow that pulls the image, runs the scan, and uploads the HTML report.
Custom Codeac Rules: Tailoring Static Analysis with YAML
Learn how to extend Codeac’s static analysis by writing lightweight YAML rules that enforce project‑specific coding standards. From authoring to CI integration, this guide walks you through a concrete example, trade‑offs, and best practices.
yamlGenerating SARIF Reports with Sema for CI Integration
Enable Sema's SARIF output to feed static analysis results into GitHub Code Scanning, GitLab SAST, and IDEs. Covers CLI flags, sema.yaml config, a complete GitHub Actions workflow, schema version pitfalls, large-file handling, and a verification checklist.
semaESLint --fix: A Mechanical Editor, Not a Code-Quality Fix
ESLint --fix can clear formatting noise in seconds, but it won't fix unused variables or logic bugs. Here's a safe workflow and the limits to know.
eslint